Search

Find a vulnerability

Search criteria

    10 vulnerabilities by smb4k

    CVE-2007-0474 (GCVE-0-2007-0474)

    Vulnerability from nvd – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a "design issue with smb4k_kill."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.500Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0474",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0474",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.500Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0473 (GCVE-0-2007-0473)

    Vulnerability from nvd – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.178Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0473",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0473",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.178Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0472 (GCVE-0-2007-0472)

    Vulnerability from nvd – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.081Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0472",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0472",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.081Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0475 (GCVE-0-2007-0475)

    Vulnerability from nvd – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.257Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0475",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0475",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.257Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2005-2851 (GCVE-0-2005-2851)

    Vulnerability from nvd – Published: 2005-09-08 04:00 – Updated: 2024-08-07 22:53
    VLAI
    Summary
    smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2166 records in the last 180 days details
    References
    URL Tags
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    http://secunia.com/advisories/16724 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/14756 vdb-entryx_refsource_BID
    http://www.gentoo.org/security/en/glsa/glsa-20051… vendor-advisoryx_refsource_GENTOO
    http://smb4k.berlios.de/ x_refsource_CONFIRM
    http://secunia.com/advisories/17636 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2005-09-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T22:53:29.460Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "MDKSA-2005:157",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157"
              },
              {
                "name": "16724",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/16724"
              },
              {
                "name": "14756",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/14756"
              },
              {
                "name": "GLSA-200511-15",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://smb4k.berlios.de/"
              },
              {
                "name": "17636",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/17636"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2005-09-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2005-09-23T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "MDKSA-2005:157",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157"
            },
            {
              "name": "16724",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/16724"
            },
            {
              "name": "14756",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/14756"
            },
            {
              "name": "GLSA-200511-15",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://smb4k.berlios.de/"
            },
            {
              "name": "17636",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/17636"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2005-2851",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "MDKSA-2005:157",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157"
                },
                {
                  "name": "16724",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/16724"
                },
                {
                  "name": "14756",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/14756"
                },
                {
                  "name": "GLSA-200511-15",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml"
                },
                {
                  "name": "http://smb4k.berlios.de/",
                  "refsource": "CONFIRM",
                  "url": "http://smb4k.berlios.de/"
                },
                {
                  "name": "17636",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/17636"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2005-2851",
        "datePublished": "2005-09-08T04:00:00.000Z",
        "dateReserved": "2005-09-08T00:00:00.000Z",
        "dateUpdated": "2024-08-07T22:53:29.460Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0474 (GCVE-0-2007-0474)

    Vulnerability from cvelistv5 – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a "design issue with smb4k_kill."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.500Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0474",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a \"design issue with smb4k_kill.\""
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0474",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.500Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0473 (GCVE-0-2007-0473)

    Vulnerability from cvelistv5 – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.178Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0473",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0473",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.178Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0472 (GCVE-0-2007-0472)

    Vulnerability from cvelistv5 – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K's lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn't properly handled by the writeFile function in core/smb4kfileio.cpp.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.081Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0472",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipulations of Smb4K\u0027s lock file, which is not properly handled by the remove_lock_file function in core/smb4kfileio.cpp, and (2) add lines to the sudoers file via a symlink attack on temporary files, which isn\u0027t properly handled by the writeFile function in core/smb4kfileio.cpp."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9630\u0026group_id=769"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0472",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.081Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-0475 (GCVE-0-2007-0475)

    Vulnerability from cvelistv5 – Published: 2007-02-03 23:00 – Updated: 2024-08-07 12:19
    VLAI
    Summary
    Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    canonical CNA under the mitre root
    CNA scorecard B 82/100 over 62 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/23984 third-party-advisoryx_refsource_SECUNIA
    https://lists.berlios.de/pipermail/smb4k-announce… mailing-listx_refsource_MLIST
    http://lists.suse.com/archive/suse-security-annou… vendor-advisoryx_refsource_SUSE
    http://developer.berlios.de/bugs/?func=detailbug&… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.securityfocus.com/bid/22299 vdb-entryx_refsource_BID
    http://secunia.com/advisories/24111 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/24469 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2007/0393 vdb-entryx_refsource_VUPEN
    http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/23937 third-party-advisoryx_refsource_SECUNIA
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://developer.berlios.de/project/shownotes.php… x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    Date Public
    2006-12-05 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T12:19:30.257Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "23984",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23984"
              },
              {
                "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
              },
              {
                "name": "SUSE-SR:2007:002",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
              },
              {
                "name": "22299",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/22299"
              },
              {
                "name": "24111",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24111"
              },
              {
                "name": "24469",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/24469"
              },
              {
                "name": "ADV-2007-0393",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/0393"
              },
              {
                "name": "GLSA-200703-09",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
              },
              {
                "name": "23937",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/23937"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
              },
              {
                "name": "MDKSA-2007:042",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-12-05T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-02-09T10:00:00.000Z",
            "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
            "shortName": "canonical"
          },
          "references": [
            {
              "name": "23984",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23984"
            },
            {
              "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
            },
            {
              "name": "SUSE-SR:2007:002",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
            },
            {
              "name": "22299",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/22299"
            },
            {
              "name": "24111",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24111"
            },
            {
              "name": "24469",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/24469"
            },
            {
              "name": "ADV-2007-0393",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/0393"
            },
            {
              "name": "GLSA-200703-09",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
            },
            {
              "name": "23937",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/23937"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
            },
            {
              "name": "MDKSA-2007:042",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "security@ubuntu.com",
              "ID": "CVE-2007-0475",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to gain privileges via unspecified vectors related to the args variable and unspecified other variables, in conjunction with the sudo configuration."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "23984",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23984"
                },
                {
                  "name": "[smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released",
                  "refsource": "MLIST",
                  "url": "https://lists.berlios.de/pipermail/smb4k-announce/2006-December/000037.html"
                },
                {
                  "name": "SUSE-SR:2007:002",
                  "refsource": "SUSE",
                  "url": "http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html"
                },
                {
                  "name": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/bugs/?func=detailbug\u0026bug_id=9631\u0026group_id=769"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=9777",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=9777"
                },
                {
                  "name": "22299",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/22299"
                },
                {
                  "name": "24111",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24111"
                },
                {
                  "name": "24469",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/24469"
                },
                {
                  "name": "ADV-2007-0393",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/0393"
                },
                {
                  "name": "GLSA-200703-09",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200703-09.xml"
                },
                {
                  "name": "23937",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/23937"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11902",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11902"
                },
                {
                  "name": "http://developer.berlios.de/project/shownotes.php?release_id=11706",
                  "refsource": "CONFIRM",
                  "url": "http://developer.berlios.de/project/shownotes.php?release_id=11706"
                },
                {
                  "name": "MDKSA-2007:042",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:042"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc",
        "assignerShortName": "canonical",
        "cveId": "CVE-2007-0475",
        "datePublished": "2007-02-03T23:00:00.000Z",
        "dateReserved": "2007-01-24T00:00:00.000Z",
        "dateUpdated": "2024-08-07T12:19:30.257Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2005-2851 (GCVE-0-2005-2851)

    Vulnerability from cvelistv5 – Published: 2005-09-08 04:00 – Updated: 2024-08-07 22:53
    VLAI
    Summary
    smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2166 records in the last 180 days details
    References
    URL Tags
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    http://secunia.com/advisories/16724 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/14756 vdb-entryx_refsource_BID
    http://www.gentoo.org/security/en/glsa/glsa-20051… vendor-advisoryx_refsource_GENTOO
    http://smb4k.berlios.de/ x_refsource_CONFIRM
    http://secunia.com/advisories/17636 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2005-09-07 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T22:53:29.460Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "MDKSA-2005:157",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157"
              },
              {
                "name": "16724",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/16724"
              },
              {
                "name": "14756",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/14756"
              },
              {
                "name": "GLSA-200511-15",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://smb4k.berlios.de/"
              },
              {
                "name": "17636",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/17636"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2005-09-07T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2005-09-23T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "MDKSA-2005:157",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157"
            },
            {
              "name": "16724",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/16724"
            },
            {
              "name": "14756",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/14756"
            },
            {
              "name": "GLSA-200511-15",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://smb4k.berlios.de/"
            },
            {
              "name": "17636",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/17636"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2005-2851",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "MDKSA-2005:157",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:157"
                },
                {
                  "name": "16724",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/16724"
                },
                {
                  "name": "14756",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/14756"
                },
                {
                  "name": "GLSA-200511-15",
                  "refsource": "GENTOO",
                  "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-15.xml"
                },
                {
                  "name": "http://smb4k.berlios.de/",
                  "refsource": "CONFIRM",
                  "url": "http://smb4k.berlios.de/"
                },
                {
                  "name": "17636",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/17636"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2005-2851",
        "datePublished": "2005-09-08T04:00:00.000Z",
        "dateReserved": "2005-09-08T00:00:00.000Z",
        "dateUpdated": "2024-08-07T22:53:29.460Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }